Privacy Policy

This Privacy Policy explains how Lyon Agro Ltd ("Lyon Agro", "we", "us" or "our") collects, uses, shares and protects personal data when you visit or interact with our website at lyonagro.com (the "Site"). We are committed to handling your personal data responsibly and in line with the Data Protection Act, 2012 (Act 843) of Ghana, and, where it applies to visitors in those regions, the EU and UK General Data Protection Regulation ("GDPR").

Please read this policy carefully. If you do not agree with it, please do not use the Site.

1. Who we are

Lyon Agro Ltd is a company incorporated in Ghana, sourcing, processing and exporting soybean, shea and related products from Northern Ghana. For the purposes of data protection law, Lyon Agro Ltd is the data controller responsible for your personal data collected through the Site.

Registered office: 11 Kofi Portuphy Close, West Legon, Accra, Ghana. Company registration number: CS137722018. Our registration with the Data Protection Commission of Ghana is currently in progress.

If you have any questions about this policy or how we handle your data, you can contact us at info@lyonagro.com.

2. The information we collect

Information you give us

The Site is primarily an informational website. We collect personal data directly from you only when you choose to provide it, for example:

• When you email us or use a contact form on the Site to make an enquiry, we collect your name, email address, and any other details you include in your message, such as your company, country and sourcing requirements.
• If you subscribe to updates or a mailing list, we collect the email address (and any name) you provide for that purpose.

You do not need to create an account to use the Site, and we do not knowingly collect sensitive personal data through it. Please only share information that is relevant to your enquiry.

Information we collect automatically

When you visit the Site, we and our service providers collect certain technical and usage information automatically. This is used to keep the Site secure, understand how it is used, and improve its performance. It includes:

• Analytics data, collected through Vercel Web Analytics: aggregated and privacy-friendly information such as the pages viewed, the referring website, approximate location at country level, and the general device, browser and operating system type. Vercel Web Analytics does not use cookies and is not designed to identify you personally or track you across other websites.
• Performance data, collected through Vercel Speed Insights: anonymised measurements of how quickly pages load and respond for real visitors, used to monitor and improve the experience of the Site.
• Server and security logs, which may include your IP address, the date and time of your request and basic request details, processed by our hosting provider to deliver the Site and protect it against misuse.

3. Cookies and similar technologies

The Site does not set advertising or cross-site tracking cookies. Our analytics and performance tools are cookieless. If we introduce cookies or similar technologies in future, for example if we add a feature that requires them, we will update this policy and, where the law requires, ask for your consent first.

4. How and why we use your information

We use the personal data described above to:

• respond to your enquiries and communicate with you about our products and services;
• send you updates you have asked to receive, and let you opt out at any time;
• operate, secure, maintain and improve the Site;
• understand, in aggregate, how the Site is used so we can make it better;
• comply with our legal obligations and protect our legal rights.

Where the GDPR applies to you, we rely on the following legal bases: your consent (for example, when you subscribe to updates), the performance of steps taken at your request before entering into a possible business relationship, our legitimate interests in operating and improving our Site and responding to enquiries (balanced against your rights), and compliance with legal obligations. Under the Ghana Data Protection Act, 2012, we process personal data on the basis of your consent or where processing is otherwise permitted by law, and in accordance with the Act's data protection principles.

5. Sharing your information

We do not sell your personal data. We share it only in limited circumstances:

• Service providers who help us run the Site and our business, and who process data on our behalf under appropriate agreements. These include our website hosting and analytics provider, Vercel Inc., and our email and business software providers.
• Legal and safety reasons, where we need to disclose data to comply with the law, respond to a lawful request from a public authority, or protect our rights, property or safety or those of others.
• Business transfers, if our business is reorganised, merged or acquired, in which case data may be transferred as part of that transaction, subject to this policy.

6. International data transfers

Because we use reputable international service providers, your personal data may be stored or processed outside Ghana, including in the European Union, the United Kingdom, the United States or other countries. Where we transfer data internationally, we take steps to ensure it remains protected in accordance with applicable law, for example by relying on providers who offer recognised safeguards such as standard contractual clauses.

7. How long we keep your information

We keep personal data only for as long as we need it for the purposes set out in this policy, or for as long as the law requires. Enquiry and correspondence data is kept for as long as needed to handle your enquiry and maintain our business records. Mailing list data is kept until you unsubscribe. Aggregated analytics data is retained by our providers on a rolling basis and does not identify you.

8. Your rights

Subject to the conditions and exemptions in applicable law, you have rights over your personal data. Under the Ghana Data Protection Act, 2012 and, where it applies, the GDPR, these may include the right to:

• access the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete your data in certain circumstances;
• ask us to restrict or object to how we use your data;
• withdraw your consent at any time, where we rely on consent;
• ask us to provide certain data to you or another provider (data portability), where the GDPR applies;
• prevent processing of your data for direct marketing.

To exercise any of these rights, please contact us at info@lyonagro.com. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law.

9. How we protect your information

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. The Site is served over encrypted connections. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's privacy

The Site is intended for businesses and adult users, and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

11. Links to other websites

The Site contains links to third-party websites, such as press articles and partner organisations. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policies of any website you visit through a link from our Site.

12. Changes to this policy

We may update this policy from time to time to reflect changes to our practices or the law. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

13. How to contact us and make a complaint

If you have any questions, concerns or complaints about this policy or how we handle your personal data, please contact us at info@lyonagro.com.

If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority. In Ghana, this is the Data Protection Commission. If you are in the European Union or the United Kingdom, you may contact your local data protection authority.